Signature Detail

HTTP: Move Media Player Quantum Streaming IE Player ActiveX Buffer Overflows

This signature detects attempts to use unsafe ActiveX controls against Move Media Player. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers. Exploiting these issues allows remote attackers to execute arbitrary code in the context of applications using the affected ActiveX control (typically Internet Explorer) and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions. These issues affect Move Media Player 1.0.0.1; other versions may also be vulnerable.

Affected Products

• Move Networks Move Media Player 1.0.0.1

References

• BugTraq: 25529
• CVE: CVE-2007-4722